d720ea207efdefc0e49dac8767603945_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d720ea207efdefc0e49dac8767603945_JaffaCakes118
Size

320KB
MD5

d720ea207efdefc0e49dac8767603945
SHA1

c5341229b95cb0718e54d0f6d31d85aebe2537e5
SHA256

3278ebc0787ecd74edb78a7b4cad2a0764cb1f760de958cb097cb3c1ab3c5036
SHA512

90704b30e66be1b9344295df48521b6e772647857fe67b95a9e94e42dfbc84a87f5b8af27e8f66e8ab49acd6b23c7d28f3b666ad1b2ae3e0b1e9df8d699a1b99
SSDEEP

6144:te5iulmsvpIgTsoP0TlW+cK00MEKzrUX3Uz6AZDWGuxLir:U5isvpUoP0Tlv00MEKz/a0r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d720ea207efdefc0e49dac8767603945_JaffaCakes118

Files

d720ea207efdefc0e49dac8767603945_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ